6873 matches found
Boundary checking errors in syscons
The syscons CONSSCRSHOT ioctl2 does insufficient validation of its input arguments. In particular, negative coordinates or large coordinates may cause unexpected behavior. It may be possible to cause the CONSSCRSHOT ioctl to return portions of kernel memory. Such memory might contain sensitive...
Debian DSA-160-1 : scrollkeeper - insecure temporary file creation
Spybreak discovered a problem in scrollkeeper, a free electronic cataloging system for documentation. The scrollkeeper-get-cl program creates temporary files in an insecure manner in /tmp using guessable filenames. Since scrollkeeper is called automatically when a user logs into a Gnome session, ...
Debian DSA-044-1 : mailx
The mail program a simple tool to read and send email as distributed with Debian GNU/Linux 2.2 has a buffer overflow in the input parsing code. Since mail is installed setgid mail by default this allowed local users to use it to gain access to mail group. Since the mail code was never written to ...
Mandrake Linux Security Advisory : OpenOffice.org (MDKSA-2004:103)
A vulnerability in OpenOffice.org was reported by pmladek where a local user may be able to obtain and read documents that belong to another user. The way that OpenOffice.org created temporary files, which used the user's umask to create the file, could potentially allow for other users to have...
CVE-2004-0906
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code...
CVE-2004-0813
Unknown vulnerability in the SGIO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations...
Mambo Portal lasted version 4.5.1 (1.09) and lower vesion : SQL injection Vulnerability.
Vendor www.mamboportal.com Message from vendor : Mambo is one of the most powerful Open Source Content Management Systems on the planet. It is used all over the world for everything from simple websites to complex corporate applications. Mambo is easy to install, simple to manage, and reliable. B...
DEBIAN-CVE-2004-1689
sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...
Moderate: Red Hat Security Advisory: openoffice.org security update
Updated openoffice.org packages that fix a security issue in temporary file handling are now available. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. Secunia...
RHEL 3 : openoffice.org (RHSA-2004:446)
Updated openoffice.org packages that fix a security issue in temporary file handling are now available. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. Secunia...
CVE-2004-0752
OpenOffice OOo 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users...
CVE-2004-0831
McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges...
sitenewsAuth.txt
SecurityTracker Alert ID: 1011159 SecurityTracker URL: http://securitytracker.com/id?1011159 Date: Sep 5 2004 Impact: Modification of user information Exploit Included: Yes Versions: 1.1 Description: A vulnerability was reported in Site News. A local user can add or edit news items. LwB Security...
[Full-Disclosure] [ GLSA 200409-11 ] star: Suid root vulnerability
Gentoo Linux Security Advisory GLSA 200409-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200409-11 : star: Suid root vulnerability
The remote host is affected by the vulnerability described in GLSA-200409-11 star: Suid root vulnerability A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact : Attackers with local user level access could potentially gain root level...
star: Suid root vulnerability
Background star is an enhanced tape archiver, much like tar, that is recognized for it's speed as well as it's enhanced mt/rmt support. Description A suid root vulnerability exists in versions of star that are configured to use ssh for remote tape access. Impact Attackers with local user level...
[ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200409-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
GLSA-200409-08 : Ruby: CGI::Session creates files insecurely
The remote host is affected by the vulnerability described in GLSA-200409-08 Ruby: CGI::Session creates files insecurely The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Session instance to be written to a file, writes t...
CVE-2002-1491
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges...